May 2021 - ncc-services-wg - mailman.ripe.net

New on RIPE Labs: RPKI Repositories and the RIPE Database in the Cloud
by Maria Stafyla 11 Jun '21

11 Jun '21

Dear Martin, As part of our cloud first strategy, we have put in place policies mandating that if we decide to migrate to cloud a service that contains personal data, this data will be stored and processed in data storage locations within the EEA. When personal data is not processed outside the EEA, there is no transfer of personal data occurring. In the event that for example access to our data is required from outside the EEA (e.g. we request technical support from the cloud provider and this gets provided by technical staff outside the EEA), one of the offered under GDPR transfer mechanisms such as transfers based on an adequacy decision issued by the European Commission, Standard Contractual Clauses etc would serve as the legal basis for this transfer to take place. The most common transfer mechanism that we see being used by our service providers are the Standard Contractual Clauses and valid adequacy decisions. With regards to international transfers of personal data based on the Standard Contractual Clauses, we perform an assessment to understand what additional measures are required to be put in place on a case-to-case basis. Examples include technical (e.g. limiting access to the data that is strictly necessary for the particular case) and contractual measures (e.g. verifying the provider's transparency with regards to received orders to disclose their customer's data and how they respond to those requests). Regarding your last question, we would like to reassure you that before we migrate a service to the cloud various internal stakeholders including technical, security, legal, communications and other colleagues are consulted to advise on the matter. These analysis are meant for internal purposes. Kind regards, Maria Stafyla Senior Legal Counsel RIPE NCC

3 3

[service] RPKI Planned Downtime
by Nathalie Trenaman 26 May '21

26 May '21

Dear colleagues, On Monday, 31 May from 10:30-12:30 (UTC+2), we plan to upgrade the infrastructure supporting our RPKI service. You will not be able to access the RPKI dashboard or API during this period. The rsync and RRDP repositories will remain available. You can always check the status of our services on our website: https://www.ripe.net/support/service-announcements <https://www.ripe.net/support/service-announcements> Kind regards, Nathalie Trenaman Routing Security Programme Manager RIPE NCC

1 0

State of sanctions
by Alex Le Heux 20 May '21

20 May '21

Hi All, The various types of sanctions and or such limits that apply to the RIPE NCC’s services have been a recurring topic for a couple years now. Recently, this seems to pop up more often though. This isn’t surprising as sanctions have become a more popular tool in the last few years. It occurred to me that we don’t seem to have a clear overview of what the total effect is: - Which sanctions, imposed by whom, affect the RIPE NCC’s operations and services? - Who are the targets of these sanctions? - Which of the RIPE NCC’s services are affected by these sanctions, for whom and in which way? (Please read “sanctions” with a wide definition and include such things as Dutch banks looking for money laundering that was mentioned during RIPE82) If there is a detailed overview of all this available, could the RIPE NCC publish this periodically? If not, can they start doing so? Best regards, Alex Le Heux

1 0

New on RIPE Labs: RPKI Repositories and the RIPE Database in the Cloud
by Alun Davies 19 May '21

19 May '21

Dear colleagues, The mission critical services the RIPE NCC provides to the Internet community require a solid technical foundation. In this new article on RIPE Labs, Felipe Silveira looks at plans to use cloud infrastructure as a means to that end. The full article is available here: https://labs.ripe.net/author/felipe_victolla_silveira/rpki-repositories-and… Kind regards, Alun Davies RIPE Labs Editor RIPE NCC

11 11

Re: [ncc-services-wg] New on RIPE Labs: RPKI Repositories and the RIPE Database in the Cloud
by Giuliano C. Peritore - Panservice 12 May '21

12 May '21

Hi, as a LIR I do *totally* agree with Gert's position to not "give away control on critical services". RIPE is in the position to guarantee a service with a relevant uptime, like it did for tens of years, and should think to "outsourced resources" just as backup in case of unavailability of internal resources. Regards, Giuliano Peritore -- Giuliano Peritore - g.peritore(a)panservice.it Direzione Generale - Panservice (AS20912) Servizi professionali per Internet ed il Networking Telefono: +39 0773 410020 - Fax +39 0773 470219 Numero verde: 800 901492 - http://www.panservice.it ----- Messaggio originale ----- Da: "Gert Doering" <gert(a)space.net> A: "Alun Davies" <adavies(a)ripe.net> Cc: ncc-services-wg(a)ripe.net Inviato: Mercoledì, 12 maggio 2021 9:19:11 Oggetto: Re: [ncc-services-wg] New on RIPE Labs: RPKI Repositories and the RIPE Database in the Cloud Hi, On Mon, May 10, 2021 at 01:40:07PM +0200, Alun Davies wrote: > The mission critical services the RIPE NCC provides to the Internet > community require a solid technical foundation. In this new article > on RIPE Labs, Felipe Silveira looks at plans to use cloud infrastructure > as a means to that end. The full article is available here: As a member, I do not want the RIPE NCC to spend our money on "give away control on critical services". Use of cloud services (or any other "outsourced infrastructure") is something I consider acceptable as a *backup* in case of something catastrophic happening to the RIPE NCC operated machines, to restore services to members and community quicker. Using cloud services generally implies - loss of control --> so the NCC *must* be primary authority on all data, and the cloud can only be a cache - loss of contact and responsibility --> if a NCC provided service does not work, I do not want to talk to a cloud provider hotline, or hear from the NCC "well, there is nothing we can do, something in the cloud is broken" All this cloudstuff is really great if you need "elastic services" (like, when the big run on the last IPv4 space starts, scale up the LIR portal to 200 instances - oh, wait, this opportunity got missed), or "low latency for high bandwidth content delivery" (so, yeah, ... no?). But for the services the NCC provides, "cloud" sounds like "yeah, someone else to blaim if it explodes", and this is not why we give the NCC money. (And no, there is not much trust from my side, since the ticket system is *still* a major annoyance in our day to day dealing with the NCC - despite promises, two years ago, to make this more usable) Gert Doering -- voting LIR contact -- have you enabled IPv6 on something today...? SpaceNet AG Vorstand: Sebastian v. Bomhard, Michael Emmer Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann D-80807 Muenchen HRB: 136055 (AG Muenchen) Tel: +49 (0)89/32356-444 USt-IdNr.: DE813185279

4 3

Fwd: Community Wellbeing Survey
by Bijal Sanghani 04 May '21

04 May '21

Dear all, In case you’re not on the ripe-list mailing list, please see below a mail from Erik on a community wellbeing survey. The deadline for the survey is May 11th and the plan is to present the results at the coming RIPE meeting. If you think this is an important topic for the community please take the time to complete the survey. Kind regards, Bijal > Begin forwarded message: > > From: Erik Bais <ebais(a)a2b-internet.com> > Subject: [ripe-list] Community Wellbeing Survey > Date: 30 April 2021 at 16:58:45 BST > To: ripe-list <ripe-list(a)ripe.net> > Cc: "erik(a)bais.name" <erik(a)bais.name> > > Dear RIPE Community, > > A couple months ago we began discussing in a small group the challenges around personal mental wellbeing in the RIPE community and how we could potentially investigate the issue and what we could potentially put in place to make things better. > One outcome of that was the development of a questionnaire around how the community is coping in the current Covid-19 era. ( The questionnaire is here: https://www.surveymonkey.com/r/JPNJG57 <https://www.surveymonkey.com/r/JPNJG57> ) > > Participating in this is a personal decision for you but we do appreciate your feedback, either via the questionnaire or other means. > > As some of you may know, I did a presentation in 2019 at the Dutch Network Operator Group ( NLNOG ) - https://www.youtube.com/watch?v=7areInUXbyo <https://www.youtube.com/watch?v=7areInUXbyo> > about working in a toxic work environment and the risks of running into a burnout. > > This topic, ( having a burnout . .the risks and being able to talk about this in groups of small peers or even in public ) is in many countries and communities still a taboo topic. > > Based on the experiences that we have from that presentation and what it did for the people in the Dutch NLNOG community.. and providing a safe place for people to talk and discuss about this.. > We decided that we also would like to see what the current state is in the larger community .. and start with a questionnaire on the topic. > > The feedback and results of the questionnaire ( and your input is highly appreciated if you participate ) will be looked at and I will do a presentation in a plenary at RIPE82 in a couple weeks. > > The goal is to see if we as a RIPE community need to provide similar ways for people in our region to (anonymously) be able to communicate about various topics that may or may not be directly work related. > > It could be that we need to have a place where we can discuss about the situation working remote .. not being able to go to the office.. the additional stress that this brings .. > or that we need to talk about what all those additional social distancing rules bring to you.. or how you feel about these rules.. for some it is a blessing .. > and for some it works like a new stress factor as the rules are changing per shop / public store / building .. and some of us like to have nice and clear directions .. > > But also about how people deal with the lockdowns .. and don’t get to meet other people that have a similar interest .. or a relation .. > So what we like to see is how are you feeling .. how are you coping .. or not .. > And then the question comes .. can we help .. and how > > I’m aware that I’m currently the one that is pushing this as a topic in public (and here for instance) .. but I’m very aware of the group of great people that helped to get this initiative and questionnaire to a state as where it is today. > And I would especially like to thank Eileen (INEX), Mirjam ( RIPE Chair ), Carolien (NCC HR) , Alastair ( NCC ), Ulka ( NCC ) Alun ( NCC ), Vesna ( NCC - for her mad Wiki and notary skills ) and the people assisting in reviewing the questionnaire already for us. > > We like to get the information before May 11th 2021, so that we have some time to look at the results and prep the ppt for the week of the RIPE82 meeting. > The data itself will be stored for max 2 weeks after that.. and only 1 admin from the NCC and the HR manager of the NCC will have access to the data, besides myself. As we use the NCC survey monkey account for the questionnaire. > All questions can be skipped if you don’t feel like you want to answer a specific question. > > And feel free to reply here on the list .. or reach out to Mirjam, Eileen (both in CC: ) or myself in private if needed. We are planning a bit larger support group once we are done with the RIPE82 meeting on this. > > To minimize tracking by Survey Monkey .. You can paste the questionnaire URL in an incognito window.. > The questionnaire is here: https://www.surveymonkey.com/r/JPNJG57 <https://www.surveymonkey.com/r/JPNJG57> > > Thank you all in advance and see you all at RIPE82. > > Kind regards, > > Erik Bais

1 0